node-cached-path-relative

2 results · Feed

• High 7.3
  CVE-2021-23518

  Prototype Pollution

  The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Object.create(null) in the cachedPathRelative function, which allows access to the parent prototype properties when the obj…

  cached-path-relative node-cached-path-relative node-cached-path-relative Debian Ubuntu npm
  Jan 21, 2022
• High 7.5
  CVE-2018-16472

  Prototype Pollution in cached-path-relative

  A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.

  npm cached-path-relative cached-path-relative node-cached-path-relative Debian Ubuntu npm
  Nov 6, 2018